Service providers and PII

Gabby Dunne made this Rhyddid Gwybodaeth request to Dundee City Council

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

Roedd y cais yn llwyddiannus.

Dear Dundee City Council,

1. Do you use an external IT service provider/Managed Service Provider (MSP)?
- Yes
- No

2. Does your provider/MSP serve as a processor of your Personally Identifiable Information (PII)?
- Yes
- No

If No, thank you for your time.
If Yes, please see below:

3. Does your contract/Service Level Agreement (SLA) with the provider(s) have clear provisions for the allocation of responsibilities in the event of a data breach?
- Yes
- No

4. Have you revisited your original contract(s) to ensure compliance with the General Data Protection Regulation (GDPR)?
- Yes
- No

5. Does the contract/SLA define the time frame in which a security breach at the provider must be reported to you?
- Yes
- No

6. Do you have policies in place for privileged account management?
- Yes
- No

7. Has your service provider/MSP suffered a data breach involving your organisation’s PII in the last 12 months?
- Yes
- No

8. If yes, how long did it take for them to notify you?
- <30 minutes
- 31 mins – 1 day
- 1 – 2 days
- 2 – 3 days
- More than 3 days

Yours faithfully,

Gabby Dunne

DCC FOISA System, Dundee City Council

Dear Sir/Madam,

Thank you for your recent Freedom of Information request.

I acknowledge receipt and your request which has now been registered under
the Freedom of Information (Scotland) Act 2002.

Please quote Reference 20180717003 in any correspondence.

Best Regards.

Freedom of Information Liaison
Dundee City Council
21 City Square
Dundee DD1 3BY
Email: [1][Dundee City Council request email]

[2]www.dundeecity.gov.uk/foisa

==================================
Please Do Not Reply to this email.
==================================

References

Visible links
1. mailto:[Dundee City Council request email]
2. http://www.dundeecity.gov.uk/foisa

DCC FOISA System, Dundee City Council

1 Atodiad

Dear Sir/Madam,

Thankyou for your information request reference: 20180717003
Please find response Document(s) attached to this email.

Relevant contact details are provided in the response document(s).
Best Regards.

Freedom of Information Liaison
Dundee City Council
21 City Square
Dundee DD1 3BY
Email: [1][Dundee City Council request email]

[2]www.dundeecity.gov.uk/foisa

==================================
Please Do Not Reply to this email.
==================================

References

Visible links
1. mailto:[Dundee City Council request email]
2. http://www.dundeecity.gov.uk/foisa